Skip to content
November 3, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Claude Code Quota Reset Follows Morning Outage Claude Code quota reset notification displayed on a developer workstation screen
  • Technology

Claude Code Quota Reset Follows Morning Outage

Do Son June 19, 2026 0

Anthropic initiates a Claude Code quota reset for premium subscribers affected by a morning server glitch that erroneously blocked message transmissions.

Chrome Extension Vulnerabilities: Millions at Risk Illustration of Chrome extension vulnerabilities and hacker exploiting MaXSS and Spyder flaws
  • Vulnerability Report

Chrome Extension Vulnerabilities: Millions at Risk

Do Son June 19, 2026 0

Discover how the MaXSS and Spyder Chrome extension vulnerabilities in MaxAI and SiderAI put millions at risk. Protect your browser sessions today.

Apple Opens iOS to Third-Party App Stores in Brazil Under CADE Settlement iOS third-party app stores Brazil Apple CADE settlement
  • Technology

Apple Opens iOS to Third-Party App Stores in Brazil Under CADE Settlement

Do Son June 19, 2026 0

Apple now allows iOS third-party app stores in Brazil under a CADE settlement, alongside new fees and a Notarization review process.

F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055) NGINX vulnerabilities CVE-2026-42530 HTTP/3 use-after-free and HTTP/2 buffer overflow
  • Vulnerability Report

F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055)

Do Son June 19, 2026 0

Two critical NGINX vulnerabilities, CVE-2026-42530 and CVE-2026-42055, let remote attackers crash workers and possibly run code. Patch NGINX now.

Critical iba Deserialization Vulnerability Exposes ibaPDA and ibaDatCoordinator to RCE (CVE-2026-8024) iba deserialization vulnerability enabling remote code execution in ibaPDA and ibaDatCoordinator (CVE-2026-8024)
  • Vulnerability Report

Critical iba Deserialization Vulnerability Exposes ibaPDA and ibaDatCoordinator to RCE (CVE-2026-8024)

Do Son June 19, 2026 0

A critical iba deserialization vulnerability (CVE-2026-8024) lets unauthenticated attackers gain remote code execution on ibaPDA and ibaDatCoordinator.

27-Year-Old OpenBSD Authentication Bypass: Details and PoC Exploit Publicly Disclosed OpenBSD authentication bypass PoC exploit for the PPP PAP CVE-2026-55706 vulnerability
  • Vulnerability Report

27-Year-Old OpenBSD Authentication Bypass: Details and PoC Exploit Publicly Disclosed

Do Son June 19, 2026 0

A 27-year-old OpenBSD authentication bypass (CVE-2026-55706) is now public, with full details and a working PoC exploit for the PPP PAP flaw.

LiteLLM Authentication Bypass via Host Header Injection (CVE-2026-49468) LiteLLM authentication bypass via Host Header Injection in the AI Gateway proxy (CVE-2026-49468)
  • Vulnerability Report

LiteLLM Authentication Bypass via Host Header Injection (CVE-2026-49468)

Do Son June 19, 2026 0

A critical LiteLLM authentication bypass (CVE-2026-49468) lets crafted Host Header Injection reach protected AI Gateway routes. Patch in 1.84.0.

Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450) Langflow file upload flaw enabling unauthenticated denial-of-service and path leak (CVE-2026-55450)
  • Vulnerability Report

Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450)

Do Son June 19, 2026 0

A critical Langflow file upload flaw (CVE-2026-55450) is public with a PoC, enabling unauthenticated denial-of-service and path disclosure. Patch 1.9.1.

Rockwell Automation patches multiple ICS flaws Rockwell Automation vulnerabilities in FactoryTalk Historian and FLEX I/O EtherNet/IP adapters
  • Vulnerability Report

Rockwell Automation patches multiple ICS flaws

Do Son June 19, 2026 0

Rockwell Automation vulnerabilities affect FactoryTalk Historian and FLEX I/O adapters, including a critical unauthenticated password-change flaw.

Splunk CVE-2026-20253: CVSS 9.8 RCE Exploited in the Wild Splunk CVE-2026-20253 remote code execution vulnerability diagram
  • Vulnerability Report

Splunk CVE-2026-20253: CVSS 9.8 RCE Exploited in the Wild

Do Son June 18, 2026 0

CISA warns of Splunk CVE-2026-20253, a CVSS 9.8 Splunk Enterprise vulnerability exploited in the wild allowing pre-authenticated remote code execution.

Node.js Security Updates: Urgent Action Required Node.js security updates patch critical vulnerabilities
  • Vulnerability Report

Node.js Security Updates: Urgent Action Required

Do Son June 18, 2026 0

Protect your servers with the latest Node.js security updates. Patch critical vulnerabilities like CVE-2026-48933 to secure your infrastructure today.

Velvet Ant’s Operation Highland: A Decade Inside Critical Infrastructure Conti ransomware developer sentenced for extortion and wire fraud
  • Cybercriminals

Velvet Ant’s Operation Highland: A Decade Inside Critical Infrastructure

Do Son June 18, 2026 0

Velvet Ant ran Operation Highland for nearly a decade, backdooring PAM and OpenSSH to hide inside an isolated critical infrastructure network.

ChatGPT Scheduled Tasks Transform AI into an Active Agent ChatGPT Scheduled Tasks feature transforming AI into an active agent
  • Technology

ChatGPT Scheduled Tasks Transform AI into an Active Agent

Do Son June 18, 2026 0

OpenAI introduces ChatGPT Scheduled Tasks, transforming the AI into a proactive agent capable of automated monitoring and routine management.

Microsoft China AI Business Thrives on OpenAI Sales Microsoft China AI business growth via OpenAI and ByteDance partnership
  • Technology

Microsoft China AI Business Thrives on OpenAI Sales

Do Son June 18, 2026 0

Microsoft's China AI business is thriving, with ByteDance spending $1 billion annually on OpenAI models via Azure despite US export bans.

Moxa Patches NPort Flaws: Root RCE and Format String Bugs (CVE-2026-10829) Moxa NPort vulnerability CVE-2026-10829 stack buffer overflow in serial device server
  • Vulnerability Report

Moxa Patches NPort Flaws: Root RCE and Format String Bugs (CVE-2026-10829)

Do Son June 18, 2026 0

A Moxa NPort vulnerability (CVE-2026-10829) lets authenticated attackers gain root via RCE on serial device servers. Patch v1.5.1 now.

AsyncRAT AI Lures Target Users Hunting AI Skills cy
  • Malware

AsyncRAT AI Lures Target Users Hunting AI Skills

Do Son June 18, 2026 0

FortiGuard Labs uncovered AsyncRAT AI lures using fake AI guides and an AutoHotkey loader to inject a stealthy .NET RAT into memory.

Apple Intelligence Developer Tools Revealed at WWDC 2026 Apple Intelligence developer tools showcase at WWDC 2026
  • Technology

Apple Intelligence Developer Tools Revealed at WWDC 2026

Do Son June 18, 2026 0

Discover the new Apple Intelligence developer tools from WWDC 2026. Explore how Xcode 27, App Intents, and MLX frameworks empower next-gen AI applications.

WhatsApp Tests View Once Text Messages WhatsApp testing View Once text messages feature on smartphone screen
  • Technology

WhatsApp Tests View Once Text Messages

Do Son June 18, 2026 0

WhatsApp is testing View Once text messages to enhance privacy. Discover how this new feature blocks screenshots and protects your sensitive information.

OpenAI Joins Rust Foundation with $600K Donation OpenAI joins Rust Foundation to support open-source infrastructure
  • Technology

OpenAI Joins Rust Foundation with $600K Donation

Do Son June 18, 2026 0

OpenAI joins the Rust Foundation as a Platinum Member, donating $600,000 to bolster open-source infrastructure and support ecosystem maintainers.

Apple Price Increase Looms Amid AI Memory Crisis Apple price increase due to AI memory component shortages
  • Technology

Apple Price Increase Looms Amid AI Memory Crisis

Do Son June 18, 2026 0

An unavoidable Apple price increase is coming soon. Discover why the AI boom and soaring memory costs will make the iPhone 18 and new Macs more expensive.

Khmer Shadow Espionage Campaign Targets Cambodian Government Trojanized streaming site causing Packagist themes iOS spyware infections
  • Malware

Khmer Shadow Espionage Campaign Targets Cambodian Government

Do Son June 18, 2026 0

Acronis reveals Khmer Shadow, a new espionage campaign using NIGHTFORGE loader and DLL sideloading to target Cambodian government entities with Havoc Demon.

FortiBleed: 30,791 Fortinet Firewalls Compromised in Global Credential Heist FortiBleed campaign map of 30,791 compromised Fortinet firewalls and VPN credential leak
  • Cybercriminals

FortiBleed: 30,791 Fortinet Firewalls Compromised in Global Credential Heist

Do Son June 18, 2026 0

The FortiBleed campaign exposed working logins for 30,791 Fortinet firewalls across 194 countries. This Fortinet credential leak hits every sector.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-81648CVSS 10.0
    The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of...
    Admin intel📅 Updated: Nov 3, 2026
  • CVE-2026-58115CVSS 10.0
    A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with...
    Admin intel📅 Updated: Nov 2, 2026
  • CVE-2026-20051CVSS 7.4
    A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2026-20118CVSS 6.8
    A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2010-20125CVSS 8.7
    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2015-20130CVSS 5.1
    Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118527CVSS 4.3
    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
    CISA KEV📅 Added to KEV: Oct 30, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-89292CVSS 9.2
    In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker...
    📅 Updated: Nov 3, 2026
  • CVE-2026-121022CVSS 9.2
    Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and...
    📅 Updated: Nov 3, 2026
  • CVE-2026-13594CVSS 9.1
    Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could...
    📅 Updated: Nov 3, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    📅 Updated: Nov 3, 2026
  • CVE-2026-86473CVSS 9.1
    Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie. When...
    📅 Updated: Nov 3, 2026
  • CVE-2026-42252CVSS 9.1
    Apache Airflow's official documentation at `core-concepts/dag-run.html` ("Passing Parameters when triggering Dags") showed a verbatim `BashOperator(bash_command="echo value: {{ dag_run.conf['conf1']...
    📅 Updated: Nov 3, 2026
  • CVE-2026-33264CVSS 9.8
    A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded...
    📅 Updated: Nov 3, 2026
  • CVE-2025-57735CVSS 9.1
    When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead...
    📅 Updated: Nov 3, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.